Displaying 1 result from an estimated 1 matches for "my_secret_1".
Did you mean:
my_secret
2013 Nov 01
1
negative ldap filter on AD
...s (sorry I'm AD newbie) to be controlled by the
'userAccountControl' field in AD.
Created 2 test users in AD : test1 test2
user test1 has been disabled from WRAT:
> ldapsearch -LLL -H ldap://localhost:389 -b 'ou=users,dc=domain,dc=lan'
> -D 'DOMAIN\ldap' -w 'My_secret_1'
> '(&(objectcategory=person)(cn=*)(userAccountControl=66048))' mail
> userAccountControl
->
> mail: test2 at domain.lan
> userAccountControl: 66048
test2 account is well set to 'disabled' and it returns 66048 value (for
a never-expire password)
> ldaps...